Connector keeps your SharePoint files encrypted and unreadable, anywhere.
Connector encrypts files inside Microsoft SharePoint and OneDrive with no migration and no change to your permissions. Each document is protected at the file level and opens only on authorized company devices, so it stays encrypted even after it leaves the tenant.
Protect Your SharePoint Data with Quantum-Safe Encryption
SharePoint manages who can open a file inside the corporate perimeter. It does not encrypt the documents at the file level, it does not follow a file once it syncs to a personal PC, and it does not stop a tenant administrator from opening it. Access control and encryption are not the same protection.
Connector is the FileGrant extension that encrypts files directly inside SharePoint and OneDrive, with no migration. Documents stay where they are, users keep their Microsoft login and workflow, and each file opens only on authorized devices. Protection lives in the file, so it does not depend on the individual user and does not end when the file leaves SharePoint.
Over 400 organizations were breached through a single SharePoint vulnerability in 2025.
Connector + FileGrant: file-centric encryption, now inside SharePoint.
Connector encrypts your files where they already live, on SharePoint and OneDrive, with the same Microsoft interface, the same permissions, and zero migration. The core stays FileGrant, which now opens and protects SharePoint documents too. For local editing, RemoteGrant handles decryption transparently. Connector adds an encryption layer on top of the Microsoft 365 stack you already run, so it complements SharePoint rather than replacing it.Encrypt, open, control. Without changing how people work.
You choose the scope, an entire SharePoint site or a single folder. Connector encrypts every file automatically and leaves it in place on SharePoint. No data is moved and no new repository is created.
Users open documents the way they do each day: in the browser with "Open with FileGrant," or locally with RemoteGrant. They authenticate with their existing Microsoft 365 login, so there is no second password and no new interface to learn.
An encrypted file opens only on an authorized company device. A user can download it to a personal or home PC, but on an unmanaged device the file will not open.
Automatic, quantum-safe encryption for every SharePoint file
Connector encrypts every file uploaded to the selected SharePoint site or folder automatically, with nothing for the user to do. The Microsoft permissions you built over the years stay exactly as they are, so you keep who-sees-what without reconfiguration. Encryption is quantum-safe: FileGrant Lock&Go uses CRYSTALS-Kyber, the algorithm NIST standardized as FIPS 203 (ML-KEM) to counter harvest-now-decrypt-later attacks.
Open encrypted SharePoint files in the browser, with your Microsoft login
Encrypted documents open directly in SharePoint, in the browser, through "Open with FileGrant." The user relies on the existing Microsoft 365 login, with no new authentication, no change of interface, and no proprietary viewer to install.
Open and edit encrypted files locally, with no copy left behind
With RemoteGrant, an encrypted file opens locally on a double click. The user edits and saves it straight back into SharePoint, and the decrypted copy stays in RAM only. Once the file is closed or the computer is off, no decrypted copy and no local trace remain.
Encrypt non-Office files that Microsoft Purview leaves unprotected
Microsoft Purview applies sensitivity labels and encryption mainly to Office formats and PDF. Connector encrypts any file type, including PSD, AutoCAD, JPEG, and TXT, and lets you open and edit each one in its native app (Photoshop, Notepad, Acrobat) without changing the extension. Connector runs on top of your Microsoft 365 stack, so it complements Purview and SharePoint rather than replacing them.
No AI can read your encrypted files, not even Copilot
Copilot and other AI assistants index the documents on SharePoint to answer users. On a file encrypted by Connector they see only ciphertext and metadata, never the readable content. The same holds outside the tenant, thanks to FileGrant: the file stays encrypted wherever it is copied, forwarded, or uploaded, so no AI system (Copilot, ChatGPT, or anything else) can read what is inside. A document that leaves encrypted never feeds a model. non finisce in nessun modello.
Files open only on authorized company devices, not on personal PCs
Connector ties file access to the device, not only to the user identity. Even with valid Microsoft 365 credentials, an encrypted file will not open on an unmanaged or personal device. The tenant administrator cannot read the documents either, because the encryption keys stay with your company (zero-knowledge). When a file is shared externally it leaves encrypted, and the screenshot and copy-paste blocks it inherits from FileGrant travel with it.
Deploy on your existing Microsoft 365 tenant, with no data migration
You turn Connector on inside the Microsoft 365 tenant you already use, over your existing SharePoint structure. Sites and folders stay where they are, with no new repository and no data migration. There are no user-side installs and no extra server to manage. You set the scope, switch on encryption, and daily work continues unchanged.
Even if attackers get into SharePoint, Connector leaves them empty-handed.
CyberGrant Connector puts FileGrant encryption inside SharePoint itself. If an attacker breaks in with phished credentials, every document is already encrypted, so nothing opens. They can exfiltrate the files, but what they take is unreadable.
Book a free consultation
See how Connector encrypts your SharePoint and OneDrive files without migration, and keeps them readable only on authorized devices.